Noninterference and the composability of security properties (1988)

by Daryl McCullough
Venue:In Proc. IEEE Symposium on Security and Privacy